DigitalSide Threat Intel

sh

First submission 2024-10-11 21:15:04 Last sumbission 2024-10-11 22:34:03

File details

File type: ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, with debug_info, not stripped
Mime type: application/x-executable
File size: 181.95 KB (186316 bytes)
MD5: bb932af6ccb77ef602ec500e85149403
SHA1: e79ae4a25d61212e839eb9c7f8114e2312782772
SHA256: dc5b21fbf719b3b5142c4c1299964075750b19e8724e565f4efc8f0a9a240f29

File features detected

Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR

OSINT Enrichments

Virus Total: 41/77 VT report date: 2024-10-11 21:14:11
Malware Type 1 trojan
Threat Type 3 gafgyt mirai bashlite

URLs, FQDN and IP indicators 2

URL Host (FQDN/IP) Date Added
hXXp://srothienhoa.com/sh VirusTotal Report srothienhoa.com VirusTotal Report 2024-10-11 22:34:06
hXXp://160.22.160.59/sh VirusTotal Report 160.22.160.59 VirusTotal Report 2024-10-11 21:15:04

Strings analysis - Possible IPs found 11

1.9.2.8
3.0.4.2
8.8.8.8
1.9.0.6
1.9.2.6
1.9.2.4
1.8.1.11
1.9.0.8
1.9.1.3
1.9.1.1
160.22.160.59

Strings analysis - Possible URLs found 5

http://www.baidu.com/search/spider.html)
http://www.baidu.com/search/spider.htm)
http://www.billybobbot.com/crawler/)
http://fast.no/support/crawler.asp)
http://feedback.redkolibri.com/